1stdibs.com, Inc. 10-K Cybersecurity GRC - 2024-02-29

Page last updated on April 11, 2024

1stdibs.com, Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-02-29 16:09:48 EST.

Filings

10-K filed on 2024-02-29

1stdibs.com, Inc. filed an 10-K at 2024-02-29 16:09:48 EST
Accession Number: 0001600641-24-000022

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

Item 1C. Cybersecurity We are committed to protecting the security of our systems and the data we handle. We are currently designing a program to align with international best practices used in our industry, such as the Cyber Security Framework from the National Institute of Standards and Technology ( NIST ). Our Board of Directors has ultimate oversight over cybersecurity risk assessment and management, which it administers through the Audit Committee. The Audit Committee oversees our cybersecurity policies and practices, internal controls regarding information security, and compliance with legal and regulatory requirements regarding cybersecurity risks. The Audit Committee receives periodic updates on cybersecurity matters from the leaders of our management team. As part of our overall enterprise risk management processes and to better evaluate our cybersecurity risks, we are conducting a business impact analysis by leveraging what we anticipate being an annual company-wide enterprise risk management assessment to understand the relationship between our critical business operations and our information technology systems. We are partnering with third party service providers to assist us in achieving our cybersecurity goals. We also have a cyber risk insurance policy designed to help us mitigate risk exposure by offsetting costs involved with recovery and remediation after a cybersecurity breach or similar event. As of the date of this Annual Report on Form 10-K, we are not aware of any material risks from cybersecurity threats that have materially affected us, including our business strategy, results of operations, or financial condition. For a discussion of how material risks from cybersecurity threats could materially affect us, see Risk Factors Risks Related to Privacy, Cybersecurity, and Infrastructure If sensitive information about our sellers and buyers or other third parties with whom we transact business is disclosed, or if we or our third-party providers are subject to cyber-attacks, use of our online marketplace could be curtailed, we may be exposed to liability, and our reputation would suffer.

Company Information